$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft File: 0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft (raw, json) Hash identifier: WjvouHMlyRIdRT+rpLozkHVOVx4kRkcsOtS7tFnAEXE= Subject key identifier: 40:39:66:8C:41:6D:1A:1B:DA:F2:B4:92:B8:4F:DE:B6:49:14:CA:9D Authority key identifier: 0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC Certificate issuer: /CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC Certificate serial: 3BF9EE2E0DD27BE6F2A1D8CF5BAD98C689DD2997 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft Manifest number: 87 Signing time: Sat 10 Oct 2026 07:29:26 +0000 Manifest this update: Sat 10 Oct 2026 07:24:26 +0000 Manifest next update: Tue 13 Oct 2026 10:45:26 +0000 Files and hashes: 1: 0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl (hash: 2iAb2gw2MzByGfvaGfqnNVrvuIfmsHnIAEqE9CCkpY4=) 2: 3130332e31322e39392e302f32342d3234203d3e20313436383032.roa (hash: tbUTFYMvu1gUlC2oFmjSZqAYOrU9u+JdPDJBttAzV/o=) 3: 3130332e31322e39382e302f32342d3234203d3e20313436383032.roa (hash: uHCaaw9s8g63NiSSnL9QPEn47SUgnpGsYsdUuRJOHSk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 10:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f9:ee:2e:0d:d2:7b:e6:f2:a1:d8:cf:5b:ad:98:c6:89:dd:29:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC Validity Not Before: Oct 10 07:24:26 2026 GMT Not After : Oct 13 10:45:26 2026 GMT Subject: CN=4039668C416D1A1BDAF2B492B84FDEB64914CA9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:57:c7:f9:9b:31:64:9b:28:8a:3e:88:19: bc:24:03:97:4d:60:0a:43:9d:f5:79:4e:0c:ac:b6: b0:b5:bb:1a:2a:a9:b3:c2:0e:6b:7a:2e:3c:07:d8: 44:a6:9f:36:f6:c1:38:ce:aa:f3:fc:bb:15:d3:4b: 3f:1f:93:14:82:9e:f4:e6:b7:0e:64:11:55:64:7e: f1:ea:50:fc:05:21:a0:5e:f3:05:6b:6c:fd:9b:78: eb:42:2e:43:b7:10:55:99:2d:7b:86:5e:0b:82:87: 15:2a:c9:30:7f:76:00:27:1c:73:15:81:4e:0d:34: ea:4f:e6:c6:7c:32:74:d3:1d:13:36:40:aa:af:e7: 89:27:dc:8e:28:8d:ed:1a:14:fa:02:63:17:ad:2e: 91:7a:f0:8a:89:5c:55:8c:e9:b8:bd:57:41:bd:fc: 87:dd:08:c8:ca:3f:9c:1f:8f:70:1b:47:6f:2a:87: f9:01:d6:b6:6c:a5:3c:4a:02:b3:19:50:a7:d3:b1: 8c:93:1f:6c:05:47:85:70:b9:f7:0b:26:79:07:d9: da:68:b4:67:40:cc:69:ed:c0:fb:8b:f0:51:2b:0d: 60:d9:5b:a7:0f:ba:71:16:6b:aa:cf:43:b7:be:47: ce:38:f4:d2:76:b7:c0:01:29:1a:30:63:87:b1:0a: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:39:66:8C:41:6D:1A:1B:DA:F2:B4:92:B8:4F:DE:B6:49:14:CA:9D X509v3 Authority Key Identifier: keyid:0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5c:e6:89:45:e8:63:e7:a1:c0:4a:fe:5c:78:01:e1:88:26: f1:73:7e:94:80:8a:5a:4a:5b:56:26:01:aa:8c:4e:36:92:90: 0f:c0:13:b6:ee:0b:8b:61:c5:45:80:e8:b8:2a:bb:aa:f7:59: de:e2:0a:5d:57:dd:0f:20:51:57:66:45:28:c4:0e:09:c4:7a: 26:89:a5:ee:8b:e8:6c:28:d6:f1:9a:e7:d6:68:1f:20:be:ed: 2f:9d:0a:80:31:c1:6f:73:43:5e:30:b2:a9:92:f1:e3:36:09: ac:4b:65:4a:59:5e:a0:08:47:75:1e:bb:21:8e:75:31:93:ce: 33:55:6e:77:c7:bd:e2:6a:e4:86:f8:b3:12:56:70:10:e8:9d: f9:ab:bf:45:17:25:89:21:73:c7:96:63:20:cf:d6:9c:05:b2: 8e:1b:b0:6f:11:02:2f:17:77:d1:b0:42:e0:a2:b0:42:da:34: 57:a4:fa:de:fe:62:93:80:02:72:0a:79:4f:68:a5:98:2b:48: 18:ce:60:7d:8b:5f:58:cc:13:a7:f0:4f:c5:0b:0e:21:ca:2d: 18:5a:a6:ee:bc:46:a9:42:22:5c:93:fc:c4:aa:92:c1:92:71: 88:22:75:12:81:da:7d:08:5b:4b:3e:c6:cc:aa:94:6e:ec:b6: 6b:43:d6:68 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO/nuLg3Se+byodjPW62YxondKZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBQjQ5QUQxMzc3RDQ2NkQxRDUxRUZFQ0FGM0IyMkFE N0Q0Q0ZDQzAeFw0yNjEwMTAwNzI0MjZaFw0yNjEwMTMxMDQ1MjZaMDMxMTAvBgNV BAMTKDQwMzk2NjhDNDE2RDFBMUJEQUYyQjQ5MkI4NEZERUI2NDkxNENBOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0m1fH+ZsxZJsoij6IGbwkA5dN YApDnfV5TgystrC1uxoqqbPCDmt6LjwH2ESmnzb2wTjOqvP8uxXTSz8fkxSCnvTm tw5kEVVkfvHqUPwFIaBe8wVrbP2beOtCLkO3EFWZLXuGXguChxUqyTB/dgAnHHMV gU4NNOpP5sZ8MnTTHRM2QKqv54kn3I4oje0aFPoCYxetLpF68IqJXFWM6bi9V0G9 /IfdCMjKP5wfj3AbR28qh/kB1rZspTxKArMZUKfTsYyTH2wFR4VwufcLJnkH2dpo tGdAzGntwPuL8FErDWDZW6cPunEWa6rPQ7e+R8449NJ2t8ABKRowY4exCpzTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQDlmjEFtGhva8rSSuE/etkkUyp0wHwYDVR0j BBgwFoAUDatJrRN31GbR1R7+yvOyKtfUz8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NTA5NTYwNzQ5NzcxOTgzMy8wLzBEQUI0OUFEMTM3N0Q0NjZEMUQ1MUVGRUNBRjNC MjJBRDdENENGQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERBQjQ5QUQxMzc3RDQ2NkQxRDUxRUZFQ0FGM0IyMkFEN0Q0Q0ZDQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTUwOTU2MDc0OTc3MTk4MzMvMC8wREFCNDlBRDEzNzdE NDY2RDFENTFFRkVDQUYzQjIyQUQ3RDRDRkNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1zmiUXoY+eh wEr+XHgB4Ygm8XN+lICKWkpbViYBqoxONpKQD8ATtu4Li2HFRYDouCq7qvdZ3uIK XVfdDyBRV2ZFKMQOCcR6Joml7ovobCjW8Zrn1mgfIL7tL50KgDHBb3NDXjCyqZLx 4zYJrEtlSlleoAhHdR67IY51MZPOM1Vud8e94mrkhvizElZwEOid+au/RRcliSFz x5ZjIM/WnAWyjhuwbxECLxd30bBC4KKwQto0V6T63v5ik4ACcgp5T2ilmCtIGM5g fYtfWMwTp/BPxQsOIcotGFqm7rxGqUIiXJP8xKqSwZJxiCJ1EoHafQhbSz7GzKqU buy2a0PWaA== -----END CERTIFICATE-----Generated at Mon Oct 12 05:20:25 2026 by rpki-client